turbot/github_compliance

Query: repo_should_have_two_admins

Usage

powerpipe query github_compliance.query.repo_should_have_two_admins

SQL

with repo_admins as (
select
name_with_owner,
url,
count(user_login) as admins
from github_my_repository r
join github_repository_collaborator c
on r.name_with_owner = c.repository_full_name
and c.permission = 'ADMIN'
group by name_with_owner, url
)
select
url as resource,
case
when admins >= 2 then 'ok'
else 'alarm'
end as status,
name_with_owner || case when admins >= 2 then ' has ' || admins::text || ' administrators.' else ' has only ' || admins::text || ' administrators.' end as reason,
name_with_owner
from repo_admins;

Controls

The query is being used by the following controls: